Vendor CVEs

WordPress

All CVEs

40,234 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	Published	Description
CVE-2023-34187	Alantien Call Now Icon Animate	Med	0.38	5.9	Aug 30, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Alan Tien Call Now Icon Animate plugin <= 0.1.0 versions.
CVE-2023-34183	Unitegallery Unite Gallery Lite	Med	0.38	5.9	Aug 30, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Valiano Unite Gallery Lite plugin <= 1.7.61 versions.
CVE-2023-33929	Joaquín Ruiz Easy Admin Menu	Med	0.38	5.9	Aug 30, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Joaquín Ruiz Easy Admin Menu plugin <= 1.3 versions.
CVE-2023-33210	WordPress nuajik	Med	0.38	5.9	Aug 30, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in nuajik plugin <= 0.1.0 versions.
CVE-2023-33208	Gsmith Cookie Monster	Med	0.38	5.9	Aug 30, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in gsmith Cookie Monster plugin <= 1.51 versions.
CVE-2023-27426	Notifyvisitors Notifyvisitors	Med	0.38	5.9	Aug 30, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Notifyvisitors NotifyVisitors plugin <= 1.0 versions.
CVE-2023-25462	Antonioandrade Wp Htaccess Control	Med	0.38	5.9	Aug 30, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP htaccess Control plugin <= 3.5.1 versions.
CVE-2023-32962	HasTheme WishSuite – Wishlist for WooCommerce	Med	0.38	5.9	Aug 30, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in HasTheme WishSuite – Wishlist for WooCommerce plugin <= 1.3.4 versions.
CVE-2023-32740	Kunalnagar Custom 404 Pro	Med	0.38	5.8	Aug 30, 2023	Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Kunal Nagar Custom 404 Pro plugin <= 3.8.1 versions.
CVE-2023-32596	Wolfgangertl Weebotlite	Med	0.38	5.9	Aug 25, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Wolfgang Ertl weebotLite plugin <= 1.0.0 versions.
CVE-2023-32595	Palasthotel Sunny Search	Med	0.38	5.9	Aug 25, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Palasthotel by Edward Bock, Katharina Rompf Sunny Search plugin <= 1.0.2 versions.
CVE-2023-32575	WooCommerce WooCommerce	Med	0.38	5.9	Aug 25, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PI Websolution Product page shipping calculator for WooCommerce plugin <= 1.3.25 versions.
CVE-2023-24394	Iframe Project Iframe	Med	0.38	5.9	Aug 25, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy iframe popup plugin <= 3.3 versions.
CVE-2023-32591	Cloud Primero B.V DBargain	Med	0.38	5.9	Aug 25, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Cloud Primero B.V DBargain plugin <= 3.0.0 versions.
CVE-2023-32584	Ebecas Ebecas	Med	0.38	5.9	Aug 25, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in John Newcombe eBecas plugin <= 3.1.3 versions.
CVE-2023-32577	Devbuddy Twitter Feed	Med	0.38	5.9	Aug 25, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Eji Osigwe DevBuddy Twitter Feed plugin <= 4.0.0 versions.
CVE-2023-32505	Ciphercoin Easy Hide Login	Med	0.38	5.9	Aug 23, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Arshid Easy Hide Login plugin <= 1.0.7 versions.
CVE-2023-32498	Ays Pro Easy Form	Med	0.38	5.9	Aug 23, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Easy Form team Easy Form by AYS plugin <= 1.2.0 versions.
CVE-2023-32496	Stopbadbots Block Bad Bots And Stop Bad Bots Crawlers And Spiders And Anti Spam Protection	Med	0.38	5.9	Aug 23, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Bill Minozzi Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection plugin <= 7.31 versions.
CVE-2023-32119	WordPress WPO365 \| Mail Integration for Office 365 / Outlook	Med	0.38	5.8	Aug 23, 2023	Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPO365 \| Mail Integration for Office 365 / Outlook plugin <= 1.9.0 versions.
CVE-2023-32130	Danielpowney Multi Rating	Med	0.38	5.9	Aug 18, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Daniel Powney Multi Rating plugin <= 5.0.6 versions.
CVE-2023-32122	Spiffyplugins Spiffy Calendar	Med	0.38	5.8	Aug 18, 2023	Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Spiffy Plugins Spiffy Calendar plugin <= 4.9.3 versions.
CVE-2023-31232	Artiss Plugins List	Med	0.38	5.9	Aug 18, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in David Artiss Plugins List plugin <= 2.5 versions.
CVE-2023-31228	CreativeMindsSolutions CM On Demand Search And Replace	Med	0.38	5.9	Aug 18, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CreativeMindsSolutions CM On Demand Search And Replace plugin <= 1.3.0 versions.
CVE-2023-30875	Allmywebneeds Logo Scheduler	Med	0.38	5.9	Aug 18, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in All My Web Needs Logo Scheduler plugin <= 1.2.0 versions.
CVE-2023-28690	Marcosteinbrecher Wp Browserupdate	Med	0.38	5.9	Aug 17, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Marco Steinbrecher WP BrowserUpdate plugin <= 4.5 versions.
CVE-2023-28783	PHPRADAR Woocommerce Tip/Donation plugin	Med	0.38	5.9	Aug 17, 2023	Auth. (shop manager+) Stored Cross-Site Scripting (XSS) vulnerability in PHPRADAR Woocommerce Tip/Donation plugin <= 1.2 versions.
CVE-2023-31091	Pradeep Singh Dynamically Register Sidebars	Med	0.38	5.9	Aug 17, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Pradeep Singh Dynamically Register Sidebars plugin <= 1.0.1 versions.
CVE-2023-30876	WordPress Dave's WordPress Live Search	Med	0.38	5.9	Aug 17, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Dave Ross Dave's WordPress Live Search plugin <= 4.8.1 versions.
CVE-2023-30874	Steve Curtis Gps Plotter plugin	Med	0.38	5.9	Aug 17, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Steve Curtis, St. Pete Design Gps Plotter plugin <= 5.1.4 versions.
CVE-2023-28622	Trident Technolabs Easy Slider Revolution	Med	0.38	5.9	Aug 17, 2023	Auth. (author+) Stored Cross-Site Scripting (XSS) vulnerability in Trident Technolabs Easy Slider Revolution plugin <= 1.0.0 versions.
CVE-2023-28533	M Williams Cab Grid	Med	0.38	5.9	Aug 17, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in M Williams Cab Grid plugin <= 1.5.15 versions.
CVE-2023-30786	Benjamin Guy Captcha Them All	Med	0.38	5.9	Aug 16, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Benjamin Guy Captcha Them All plugin <= 1.3.3 versions.
CVE-2023-30752	Gingertech External Videos	Med	0.38	5.9	Aug 14, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Silvia Pfeiffer and Andrew Nimmo External Videos plugin <= 2.0.1 versions.
CVE-2023-30751	Icontrolwp Article Directory Redux	Med	0.38	5.9	Aug 14, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in iControlWP Article Directory Redux plugin <= 1.0.2 versions.
CVE-2023-30749	WordPress Optima Express + MarketBoost IDX Plugin	Med	0.38	5.9	Aug 14, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in ihomefinder Optima Express + MarketBoost IDX Plugin plugin <= 7.3.0 versions.
CVE-2023-30477	Essitco Affiliate Solution	Med	0.38	5.9	Aug 14, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Essitco AFFILIATE Solution plugin <= 1.0 versions.
CVE-2023-29097	A3rev Software A3 Portfolio	Med	0.38	5.9	Aug 14, 2023	Auth. (author+) Stored Cross-Site Scripting (XSS) vulnerability in a3rev Software a3 Portfolio plugin <= 3.1.0 versions.
CVE-2023-38397	WordPress Gestion-Pymes	Med	0.38	5.9	Aug 10, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Eggemplo Gestion-Pymes plugin <= 1.5.6 versions.
CVE-2023-37388	Sudipto Pratap Mahato Simple Light Weight Social Share	Med	0.38	5.9	Aug 10, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Sudipto Pratap Mahato Simple Light Weight Social Share plugin <= 2.0 versions.
CVE-2023-24391	WordPress ApplyOnline	Med	0.38	5.9	Aug 10, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Spider Teams ApplyOnline plugin <= 2.5 versions.
CVE-2023-36530	WordPress Smartypants SP Project & Document Manager	Med	0.38	5.9	Aug 10, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Smartypants SP Project & Document Manager plugin <= 4.67 versions.
CVE-2023-34374	Anspress Anspress	Med	0.38	5.9	Aug 10, 2023	Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Rahul Aryan AnsPress plugin <= 4.3.0 versions.
CVE-2023-23900	Yikes, Inc. Easy Forms For Mailchimp	Med	0.38	5.8	Aug 10, 2023	Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in YIKES, Inc. Easy Forms for Mailchimp plugin <= 6.8.8 versions.
CVE-2023-23871	webdzier Button	Med	0.38	5.9	Aug 10, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Webdzier Button plugin <= 1.1.23 versions.
CVE-2023-24389	Brandid Social Proof \(testimonial\) Slider	Med	0.38	5.9	Aug 10, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in brandiD Social Proof (Testimonial) Slider plugin <= 2.2.3 versions.
CVE-2023-32292	Getbutton Chat Button	Med	0.38	5.9	Aug 8, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in GetButton Chat Button by GetButton.Io plugin <= 1.8.9.4 versions.
CVE-2023-31221	Ransomchristofferson Pdq CSV	Med	0.38	5.9	Aug 8, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ransom Christofferson PDQ CSV plugin <= 1.0.0 versions.
CVE-2023-28934	Mammothology Wp Full Stripe Free	Med	0.38	5.9	Aug 8, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Mammothology WP Full Stripe Free plugin <= 1.6.1 versions.
CVE-2023-28931	Never5 Post Connector	Med	0.38	5.9	Aug 8, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Never5 Post Connector plugin <= 1.0.9 versions.

CVE-2023-34187MedAug 30, 2023
Alantien
Call Now Icon Animate
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Alan Tien Call Now Icon Animate plugin <= 0.1.0 versions.
CVE-2023-34183MedAug 30, 2023
Unitegallery
Unite Gallery Lite
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Valiano Unite Gallery Lite plugin <= 1.7.61 versions.
CVE-2023-33929MedAug 30, 2023
Joaquín Ruiz
Easy Admin Menu
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Joaquín Ruiz Easy Admin Menu plugin <= 1.3 versions.
CVE-2023-33210MedAug 30, 2023
WordPress
nuajik
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in nuajik plugin <= 0.1.0 versions.
CVE-2023-33208MedAug 30, 2023
Gsmith
Cookie Monster
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in gsmith Cookie Monster plugin <= 1.51 versions.
CVE-2023-27426MedAug 30, 2023
Notifyvisitors
Notifyvisitors
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Notifyvisitors NotifyVisitors plugin <= 1.0 versions.
CVE-2023-25462MedAug 30, 2023
Antonioandrade
Wp Htaccess Control
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP htaccess Control plugin <= 3.5.1 versions.
CVE-2023-32962MedAug 30, 2023
HasTheme
WishSuite – Wishlist for WooCommerce
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in HasTheme WishSuite – Wishlist for WooCommerce plugin <= 1.3.4 versions.
CVE-2023-32740MedAug 30, 2023
Kunalnagar
Custom 404 Pro
risk 0.38cvss 5.8epss 0.00
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Kunal Nagar Custom 404 Pro plugin <= 3.8.1 versions.
CVE-2023-32596MedAug 25, 2023
Wolfgangertl
Weebotlite
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Wolfgang Ertl weebotLite plugin <= 1.0.0 versions.
CVE-2023-32595MedAug 25, 2023
Palasthotel
Sunny Search
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Palasthotel by Edward Bock, Katharina Rompf Sunny Search plugin <= 1.0.2 versions.
CVE-2023-32575MedAug 25, 2023
WooCommerce
WooCommerce
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PI Websolution Product page shipping calculator for WooCommerce plugin <= 1.3.25 versions.
CVE-2023-24394MedAug 25, 2023
Iframe Project
Iframe
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy iframe popup plugin <= 3.3 versions.
CVE-2023-32591MedAug 25, 2023
Cloud Primero B.V
DBargain
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Cloud Primero B.V DBargain plugin <= 3.0.0 versions.
CVE-2023-32584MedAug 25, 2023
Ebecas
Ebecas
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in John Newcombe eBecas plugin <= 3.1.3 versions.
CVE-2023-32577MedAug 25, 2023
Devbuddy
Twitter Feed
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Eji Osigwe DevBuddy Twitter Feed plugin <= 4.0.0 versions.
CVE-2023-32505MedAug 23, 2023
Ciphercoin
Easy Hide Login
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Arshid Easy Hide Login plugin <= 1.0.7 versions.
CVE-2023-32498MedAug 23, 2023
Ays Pro
Easy Form
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Easy Form team Easy Form by AYS plugin <= 1.2.0 versions.
CVE-2023-32496MedAug 23, 2023
Stopbadbots
Block Bad Bots And Stop Bad Bots Crawlers And Spiders And Anti Spam Protection
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Bill Minozzi Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection plugin <= 7.31 versions.
CVE-2023-32119MedAug 23, 2023
WordPress
WPO365 | Mail Integration for Office 365 / Outlook
risk 0.38cvss 5.8epss 0.00
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPO365 | Mail Integration for Office 365 / Outlook plugin <= 1.9.0 versions.
CVE-2023-32130MedAug 18, 2023
Danielpowney
Multi Rating
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Daniel Powney Multi Rating plugin <= 5.0.6 versions.
CVE-2023-32122MedAug 18, 2023
Spiffyplugins
Spiffy Calendar
risk 0.38cvss 5.8epss 0.00
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Spiffy Plugins Spiffy Calendar plugin <= 4.9.3 versions.
CVE-2023-31232MedAug 18, 2023
Artiss
Plugins List
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in David Artiss Plugins List plugin <= 2.5 versions.
CVE-2023-31228MedAug 18, 2023
CreativeMindsSolutions
CM On Demand Search And Replace
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CreativeMindsSolutions CM On Demand Search And Replace plugin <= 1.3.0 versions.
CVE-2023-30875MedAug 18, 2023
Allmywebneeds
Logo Scheduler
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in All My Web Needs Logo Scheduler plugin <= 1.2.0 versions.
CVE-2023-28690MedAug 17, 2023
Marcosteinbrecher
Wp Browserupdate
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Marco Steinbrecher WP BrowserUpdate plugin <= 4.5 versions.
CVE-2023-28783MedAug 17, 2023
PHPRADAR
Woocommerce Tip/Donation plugin
risk 0.38cvss 5.9epss 0.00
Auth. (shop manager+) Stored Cross-Site Scripting (XSS) vulnerability in PHPRADAR Woocommerce Tip/Donation plugin <= 1.2 versions.
CVE-2023-31091MedAug 17, 2023
Pradeep Singh
Dynamically Register Sidebars
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Pradeep Singh Dynamically Register Sidebars plugin <= 1.0.1 versions.
CVE-2023-30876MedAug 17, 2023
WordPress
Dave's WordPress Live Search
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Dave Ross Dave's WordPress Live Search plugin <= 4.8.1 versions.
CVE-2023-30874MedAug 17, 2023
Steve Curtis
Gps Plotter plugin
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Steve Curtis, St. Pete Design Gps Plotter plugin <= 5.1.4 versions.
CVE-2023-28622MedAug 17, 2023
Trident Technolabs
Easy Slider Revolution
risk 0.38cvss 5.9epss 0.00
Auth. (author+) Stored Cross-Site Scripting (XSS) vulnerability in Trident Technolabs Easy Slider Revolution plugin <= 1.0.0 versions.
CVE-2023-28533MedAug 17, 2023
M Williams
Cab Grid
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in M Williams Cab Grid plugin <= 1.5.15 versions.
CVE-2023-30786MedAug 16, 2023
Benjamin Guy
Captcha Them All
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Benjamin Guy Captcha Them All plugin <= 1.3.3 versions.
CVE-2023-30752MedAug 14, 2023
Gingertech
External Videos
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Silvia Pfeiffer and Andrew Nimmo External Videos plugin <= 2.0.1 versions.
CVE-2023-30751MedAug 14, 2023
Icontrolwp
Article Directory Redux
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in iControlWP Article Directory Redux plugin <= 1.0.2 versions.
CVE-2023-30749MedAug 14, 2023
WordPress
Optima Express + MarketBoost IDX Plugin
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in ihomefinder Optima Express + MarketBoost IDX Plugin plugin <= 7.3.0 versions.
CVE-2023-30477MedAug 14, 2023
Essitco
Affiliate Solution
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Essitco AFFILIATE Solution plugin <= 1.0 versions.
CVE-2023-29097MedAug 14, 2023
A3rev Software
A3 Portfolio
risk 0.38cvss 5.9epss 0.00
Auth. (author+) Stored Cross-Site Scripting (XSS) vulnerability in a3rev Software a3 Portfolio plugin <= 3.1.0 versions.
CVE-2023-38397MedAug 10, 2023
WordPress
Gestion-Pymes
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Eggemplo Gestion-Pymes plugin <= 1.5.6 versions.
CVE-2023-37388MedAug 10, 2023
Sudipto Pratap Mahato
Simple Light Weight Social Share
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Sudipto Pratap Mahato Simple Light Weight Social Share plugin <= 2.0 versions.
CVE-2023-24391MedAug 10, 2023
WordPress
ApplyOnline
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Spider Teams ApplyOnline plugin <= 2.5 versions.
CVE-2023-36530MedAug 10, 2023
WordPress
Smartypants SP Project & Document Manager
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Smartypants SP Project & Document Manager plugin <= 4.67 versions.
CVE-2023-34374MedAug 10, 2023
Anspress
Anspress
risk 0.38cvss 5.9epss 0.00
Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Rahul Aryan AnsPress plugin <= 4.3.0 versions.
CVE-2023-23900MedAug 10, 2023
Yikes, Inc.
Easy Forms For Mailchimp
risk 0.38cvss 5.8epss 0.00
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in YIKES, Inc. Easy Forms for Mailchimp plugin <= 6.8.8 versions.
CVE-2023-23871MedAug 10, 2023
webdzier
Button
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Webdzier Button plugin <= 1.1.23 versions.
CVE-2023-24389MedAug 10, 2023
Brandid
Social Proof \(testimonial\) Slider
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in brandiD Social Proof (Testimonial) Slider plugin <= 2.2.3 versions.
CVE-2023-32292MedAug 8, 2023
Getbutton
Chat Button
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in GetButton Chat Button by GetButton.Io plugin <= 1.8.9.4 versions.
CVE-2023-31221MedAug 8, 2023
Ransomchristofferson
Pdq CSV
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ransom Christofferson PDQ CSV plugin <= 1.0.0 versions.
CVE-2023-28934MedAug 8, 2023
Mammothology
Wp Full Stripe Free
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Mammothology WP Full Stripe Free plugin <= 1.6.1 versions.
CVE-2023-28931MedAug 8, 2023
Never5
Post Connector
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Never5 Post Connector plugin <= 1.0.9 versions.

Page 477 of 805